Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8f2aa9b2-ff2e-40c3-a1ad-c0b3d10b1fac.roa
File:                     8f2aa9b2-ff2e-40c3-a1ad-c0b3d10b1fac.roa (raw, json)
Hash identifier:          5mAeXyY5vKdSCrJCCfCduhYjqgEf7wR3jSvFg7/QJuM=
Subject key identifier:   7E:1E:AE:78:8D:98:40:F7:7C:BC:F0:C1:6F:03:37:76:2E:6B:9C:86
Certificate issuer:       /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial:       574428E7CB41375C972005DB76155D5F2FF325C3
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8f2aa9b2-ff2e-40c3-a1ad-c0b3d10b1fac.roa
Signing time:             Sat 09 Sep 2023 00:00:00 +0000
ROA not before:           Sat 09 Sep 2023 00:00:00 +0000
ROA not after:            Sat 14 Oct 2023 23:59:59 +0000
asID:                     16509
IP address blocks:        2a05:d031:5000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
                          rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
                          rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Sep 2023 17:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:44:28:e7:cb:41:37:5c:97:20:05:db:76:15:5d:5f:2f:f3:25:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
        Validity
            Not Before: Sep  9 00:00:00 2023 GMT
            Not After : Oct 14 23:59:59 2023 GMT
        Subject: serialNumber=4106a51f4f918181706b3d27f2e95eeadafc4aa63508673d80b74af65286bb83, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:88:51:24:cf:7b:30:8e:99:0b:5b:a3:a6:ed:
                    74:8d:53:bb:2b:53:01:71:41:3f:b7:57:82:d5:9e:
                    43:8f:ca:2d:b3:59:50:51:79:98:88:19:a2:a9:1b:
                    2f:0f:73:c0:9d:2e:ac:f2:47:7e:92:e7:5c:6f:89:
                    ac:d2:c1:bf:74:86:17:86:bc:62:97:c1:4e:1b:c9:
                    c5:b8:33:e8:97:7c:c5:e8:43:25:2e:2a:52:01:af:
                    ba:5f:53:d4:8c:f4:3a:63:c3:17:9e:8d:4d:08:64:
                    11:5b:37:d3:df:c6:6e:34:ff:77:87:c6:4f:4a:0b:
                    e3:da:0a:f2:a9:72:c3:9b:66:af:28:1b:09:fd:22:
                    ad:8e:db:e1:ce:27:77:6f:e3:70:f4:18:8c:b0:9a:
                    14:84:ad:91:6d:70:52:05:1b:4f:dc:59:8f:60:a9:
                    8e:e5:70:26:e1:80:dd:12:cc:32:99:a6:fa:6b:21:
                    c6:ea:33:b3:f5:1d:d9:8d:c5:76:1e:e7:9d:d4:4f:
                    e1:63:da:a7:c7:76:be:f0:4e:9a:42:83:bb:1e:ea:
                    2f:02:c5:e3:d3:64:3a:53:66:d0:10:56:c5:a9:d2:
                    90:53:a9:e3:67:6b:96:02:8e:90:c6:71:5c:de:e1:
                    4f:f8:01:26:fa:f0:8b:ef:5d:78:ea:ce:60:49:80:
                    31:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1E:AE:78:8D:98:40:F7:7C:BC:F0:C1:6F:03:37:76:2E:6B:9C:86
            X509v3 Authority Key Identifier:
                keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/8f2aa9b2-ff2e-40c3-a1ad-c0b3d10b1fac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:d031:5000::/40

    Signature Algorithm: sha256WithRSAEncryption
         30:0d:7c:bb:13:37:86:15:48:26:67:13:ef:d6:38:27:ae:69:
         52:80:52:39:5d:8d:7a:2a:21:48:35:88:2c:04:3b:9c:f4:38:
         ed:f6:32:3c:7e:48:25:6f:8c:36:e2:64:93:28:5e:16:ae:23:
         fd:86:42:f8:2e:70:12:0e:e6:af:5a:e2:c1:ff:35:05:38:22:
         aa:06:67:01:26:e9:99:02:f7:e4:44:b6:06:61:cb:d3:86:81:
         a8:26:8f:ec:83:db:2f:a2:ca:10:a2:61:15:dc:1a:d8:7e:99:
         1d:ce:5c:5f:da:cd:f9:e9:06:f7:ad:1c:29:c3:a0:ec:4f:88:
         5f:2c:10:f1:be:5d:15:3a:09:55:da:0b:dc:cc:72:45:c1:5c:
         ef:52:08:b3:ed:d8:69:2b:78:40:52:ad:01:ca:5c:83:86:4f:
         78:aa:2e:af:97:e8:7d:60:c6:0e:53:7f:47:6a:b2:4e:b0:97:
         93:55:6f:3c:2b:7d:e0:fd:17:28:81:e3:7b:a6:91:32:51:1c:
         7c:e2:ed:0d:97:74:4e:2c:38:ec:a6:07:56:a6:28:d5:f1:4a:
         62:5a:ba:ba:de:eb:54:e6:94:ec:50:10:b0:38:d9:fd:1a:00:
         38:1e:d6:ab:81:ce:c2:f8:a1:0f:93:cf:8b:99:2a:30:51:f6:
         ec:73:1e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----